General

  • Target
    2026-06-30_5c75889617dff8ec42b8f8c232dbd748_elex_nymaim_redline-stealer_rhadamanthys_smoke-loader_tofsee
  • Size 940KB
  • Sample260701-fe63psgv8y
  • SHA256 a55d6164bdc76d683d5a922cc71715dd6a8df8be417b1f36664c5b364c1800fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-06-30_5c75889617dff8ec42b8f8c232dbd748_elex_nymaim_redline-stealer_rhadamanthys_smoke-loader_tofsee
    • Size 940KB
    • SHA256 a55d6164bdc76d683d5a922cc71715dd6a8df8be417b1f36664c5b364c1800fb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks